One interesting question suppose you want to also create a DMZ and put a proxy server there for all employees to use for internet access.
Could you use the same DMZ that you have already configured for your WebServer and incoming traffic?